Data at rest Europe

Hi logger2115!

I guess your MDE and XDR setups defaulted to Europe instead of East US because of how the services were initially set up or region selection during the process. These defaults can sometimes be tied to the Microsoft data centers handling the deployment, even if your primary tenant is in East US.

Unfortunately, as far as i know, once the initial setup is done, changing regions isn't always simple. You might need to redo the setup.

As for streaming logs across continents, the cost for ingestion depends on the pricing model you choose and how much data you’re sending. To get the exact dollar per gig, you’ll need to check the detailed pricing for Log Analytics in the Defender portal or Azure pricing documentation.

It can get tricky, especially if the region selection wasn't clear during the setup.